
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
File: c50bf71f-42f4-380a-89be-7d4e918b0444.roa (raw, json)
Hash identifier: fgWduDiXyBvJ20gJkZl4nSaZtyoIDr0rI7ZMg/bzBM0=
Subject key identifier: 7A:F9:F1:FE:F6:52:02:CF:97:10:DE:E6:49:8F:CF:B9:74:A1:75:D9
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F4973C2F41C2BCDFE89AB4900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 852
IP address blocks: 209.53.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:c2:f4:1c:2b:cd:fe:89:ab:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a09e235f-5407-48a3-ad72-c7c19bd30a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:ba:73:8e:2f:00:6b:00:5b:96:04:87:bc:
a4:b5:69:60:20:ce:16:72:bd:5a:3e:33:ed:ae:b9:
59:f4:d9:c8:b6:44:af:e8:38:02:c4:5e:91:43:61:
7d:07:f6:0e:c2:1b:8a:80:5f:2d:81:0a:c6:29:97:
6a:e4:4d:ec:1d:17:3e:41:72:6c:7c:74:6b:e1:0b:
7a:e7:0a:13:b8:3a:4f:55:69:7f:2f:10:8d:17:74:
a3:c3:bf:b5:d1:77:f6:e2:09:e8:b2:8f:9f:d0:b4:
10:21:99:cd:8e:01:41:82:bc:a2:d9:a6:d3:9e:d6:
64:5a:f4:fc:fd:01:eb:8e:f9:50:6d:fe:c1:50:55:
e9:76:ab:36:b2:f1:2d:68:89:f3:e7:e9:df:1e:59:
54:84:47:9c:db:61:a2:89:f0:52:14:b9:61:78:33:
63:e0:b9:47:98:ca:6f:24:ea:37:b3:5a:c8:d7:b5:
5e:5f:ad:5b:a1:32:4c:26:5d:3d:ec:58:5e:d9:70:
a1:bd:b4:7d:46:cc:ec:c7:69:37:49:b6:5a:3f:66:
81:81:f5:7e:99:a3:87:9a:52:2a:a9:81:60:a8:cd:
15:f8:fc:29:eb:fc:fc:6d:83:4d:5f:5b:f0:14:6a:
dd:2f:15:0a:52:07:3e:90:44:98:d8:b1:e4:68:1e:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:F1:FE:F6:52:02:CF:97:10:DE:E6:49:8F:CF:B9:74:A1:75:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:62:43:6d:41:2b:57:63:81:29:7e:30:a5:08:5d:74:ff:36:
66:8a:49:66:7b:d8:66:70:40:55:28:5d:c0:1c:b9:56:db:8a:
91:57:7f:60:70:14:32:e5:06:7b:b8:82:fc:03:54:c2:c7:80:
1d:7a:6a:02:70:10:f6:40:87:2f:30:1e:f1:1a:8b:fa:e2:2d:
15:0d:ab:43:90:50:f4:bd:fc:f6:d4:04:f2:83:ec:fb:3e:92:
2e:c4:4d:21:45:ce:c5:b6:99:d0:0c:01:99:33:e6:44:aa:c8:
d5:e8:16:3c:25:95:42:6f:e4:b8:4f:26:77:ac:0b:53:b9:8d:
fc:e7:c5:cc:8c:88:77:83:46:45:eb:11:e3:c8:a6:b3:da:d5:
a0:61:3d:77:f6:48:57:e6:b4:32:2e:af:e7:6d:8c:85:34:94:
68:e6:5a:83:36:29:24:ea:8d:f8:ed:97:ba:dc:9f:11:f2:6b:
37:09:a2:8b:f4:80:3c:f3:14:af:53:16:bc:28:db:a2:da:d1:
aa:b9:4d:a3:dd:e9:5b:79:39:79:f9:48:61:7c:5b:81:22:7e:
7c:3a:be:08:da:02:84:6b:37:d6:cc:8d:e4:bc:6c:d3:14:a8:
bf:3f:9e:20:e0:ad:fd:e8:06:8a:91:9f:71:33:8c:c1:48:d1:
42:67:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:38:36 2026 by rpki-client